- Home
- Skills
- Code Quality & Review
- GitGov IA — Gobernanza y Auditoría Git
Works with the AI Agents you already use
GitGov IA — Gobernanza y Auditoría Git
Standardize Git governance with automated auditing, secret detection, and AI authorship tracking.
$5
GitGov IA — Gobernanza y Auditoría Git
Example session with this skill installed
Run a security audit on the last 5 commits and check my local git identity.
- Read your context and instructions
- Compiled the gitgov ia
I have performed a security and authorship audit on the repository. I checked the last 5 commits for sensitive patterns and verified your local Git configuration against project standards.
Git Audit & Security Report
| Category | Check | Status | Findings / Evidence |
|---|---|---|---|
| Identity | user.name | OK | dev-user-01 |
| Identity | user.email | OK | dev@company.local |
| Auth | Author vs Committer | OK | No discrepancies found in last 5 commits. |
| Security | Secret Scanning | WARNING | Potential API key pattern in config/env.template (line 12). |
| Security | .gitignore | OK | Rules for .env and *.pem are present. |
| Commits | Conventional Format | FAIL | Commit a1b2c3d message "update" is too generic. |
| AI Trail | AI-Assisted Trailer | MISSING | 2 commits show AI patterns but lack AI-Assisted: true. |
Findings Summary:
Critical: A potential secret was detected in a template file. Although it is a template, ensure no real keys were used for testing.
- Compliance: Commit messages are not following the
type(scope): descriptionformat. - Governance: Identified 2 commits that appear to be generated by an agent but lack the required metadata trailers.
Next steps
- Review
config/env.templateand redact any literal values found. - Update your local commit template to include the
AI-Assistedtrailer if you are using an LLM. - Use the
git-commit-conventionsskill to refactor the non-compliant commit messages before the next push.
Connects securely to your tools. The creator never sees your data.
About this skill
GitGov IA provides a standardized governance framework for Git repositories, focusing on auditability, security, and clear authorship. It solves the problem of inconsistent commit history, accidental credential leaks, and the lack of transparency in AI-assisted coding. Use this skill to enforce high-quality standards across your version control workflow without manual policing.
What it does
- Enforce Commit Standards ensures every message follows Conventional Commits with specific tags for AI assistance.
- Audit Repository State generates reproducible reports on Git configuration, branch health, and commit quality.
- Validate Authorship prevents impersonation or accidental identity leaks by verifying local user settings and commit signatures.
- Detect Secrets scans staged changes and recent history for leaked tokens or credentials using non-destructive inspection.
- Manage Branching Strategy defines and monitors integration flows, PR requirements, and protection rules.
- Track AI Provenance registers a verifiable trail of which changes were generated by AI and which were human-reviewed.
How it works
- Initialize Audit by running a scan of your local Git environment and recent commit metadata.
- Review Identity to ensure your local
user.nameanduser.emailmatch project requirements before committing. - Analyze Changes with the security and convention tools to identify risks or non-compliant formatting.
- Generate Documentation for Pull Requests or Releases, including AI-assisted trailers and changelog summaries.
Frameworks & tools
This skill works with any project using the Git CLI. It follows industry standards like Conventional Commits and Semantic Versioning (SemVer) and is compatible with major platforms like GitHub, GitLab, and Bitbucket.
Why this beats prompting it yourself
Generic prompts often miss technical nuances like the difference between an author and a committer or the danger of rebase on shared branches. This skill implements a strict governance protocol that treats AI participation as a trackable data point rather than a guess, ensuring your audit trail is professional and legally defensible.
Use cases
- Auditing a repository before a major release to ensure compliance.
- Standardizing commit messages across a team using AI coding tools.
- Detecting accidental secret exposure in staged files before pushing.
- Documenting AI involvement in codebase contributions for legal or internal policy.
Known limitations
This skill performs non-destructive inspections and will not rewrite history or rotate keys automatically. Security scans rely on heuristics and require human verification of potential findings.
Requires Git CLI installed. Non-destructive only: will not automatically rewrite history or rotate secrets. Identifies patterns but requires human verification for final risk assessment.
How to use
- 1
Connect your agent to the Agensi MCP
Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup
- 2
Sign in to Agensi
Your agent shows a sign-in link. Sign in and click Allow.
- 3
Ask for what you need
Your agent loads this skill and uses it on your task. It always asks before any payment.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill goes through the trust checks below.
Security scanned
Checked by our 8-point scan before listing
Fresh listing
Recently published to Agensi
Money-back guarantee
Doesn't do what its page promises? You get your money back.
Trust & safety
Security scan
Security scan passed today
Requires